Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616335303a3a2f34342d3532203d3e20323135303339.roa
File:                     326130613a363034343a616335303a3a2f34342d3532203d3e20323135303339.roa (raw, json)
Hash identifier:          J5F6K5FCgqUKzDqlXst+69DjwfkyC8ApNmb+fu8xZd0=
Subject key identifier:   ED:51:FE:8A:EA:E2:0C:61:5E:90:82:73:E7:5A:D5:92:A8:25:25:EC
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       15D49AB7B9B5B557D329C215A5149E09365ADBF7
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616335303a3a2f34342d3532203d3e20323135303339.roa
Signing time:             Fri 07 Feb 2025 18:33:40 +0000
ROA not before:           Fri 07 Feb 2025 18:28:40 +0000
ROA not after:            Fri 06 Feb 2026 18:33:40 +0000
asID:                     215039
IP address blocks:        2a0a:6044:ac50::/44 maxlen: 52
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d4:9a:b7:b9:b5:b5:57:d3:29:c2:15:a5:14:9e:09:36:5a:db:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Feb  7 18:28:40 2025 GMT
            Not After : Feb  6 18:33:40 2026 GMT
        Subject: CN=ED51FE8AEAE20C615E908273E75AD592A82525EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:9f:29:9f:b8:57:ec:bf:02:4f:2b:28:7c:
                    27:2a:00:dc:68:ea:f1:ff:8f:74:7e:38:84:a2:40:
                    d8:82:09:5d:0f:df:9f:c7:14:db:94:f9:54:8e:25:
                    c9:df:bb:65:b1:7a:c1:2f:e3:ad:f7:88:a2:cc:02:
                    0d:14:94:6e:bc:cd:8b:29:2b:14:14:36:21:23:cc:
                    f0:04:76:30:87:7d:ce:cb:fb:a7:1e:76:19:7d:0a:
                    79:58:f6:b8:11:d1:61:44:36:3c:ed:b2:42:0b:fc:
                    01:32:c5:ea:7a:03:ef:3f:01:8b:aa:74:99:04:36:
                    6d:81:51:48:cb:93:38:dd:29:44:f9:bd:9d:07:f9:
                    b6:dd:92:85:d4:99:f7:fe:f4:d8:db:5d:03:0e:7e:
                    9d:b9:d1:81:9f:e5:af:87:e8:af:53:82:d9:50:0e:
                    72:55:77:11:58:37:b9:20:39:a3:c2:cd:54:ea:b1:
                    06:15:5c:1e:04:dd:a3:ee:1d:ab:7b:7a:2c:8b:42:
                    13:4a:b7:0c:8f:a7:ee:a0:39:0b:d4:e4:40:d2:90:
                    bc:ac:bb:36:18:f4:1d:b2:2b:88:1e:46:3e:0a:3f:
                    52:84:3e:04:68:21:53:98:5e:86:61:5b:24:71:b7:
                    82:e7:61:29:d1:d8:b5:ae:c9:8e:35:a9:97:48:8e:
                    f9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:FE:8A:EA:E2:0C:61:5E:90:82:73:E7:5A:D5:92:A8:25:25:EC
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a616335303a3a2f34342d3532203d3e20323135303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ac50::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:fd:9a:9a:76:83:87:2a:14:7e:0b:9b:f5:2f:fd:68:73:99:
         04:cb:1b:ab:71:03:83:63:49:f6:15:66:de:c2:e5:29:c8:88:
         fe:05:f7:2b:79:03:9e:fc:8a:f7:89:1c:c4:1d:a2:29:94:22:
         c0:9d:dc:6c:68:3e:25:8a:53:28:85:ea:3a:7f:ed:69:a6:b3:
         27:e8:41:1e:19:29:72:0a:45:85:b2:2c:ed:91:55:91:69:05:
         10:73:94:37:3b:1e:4a:a8:79:f0:ba:a9:a0:5c:ec:c5:11:8e:
         cd:16:80:b6:36:57:a7:d6:af:fc:70:57:b4:14:06:29:24:a5:
         2e:d1:de:af:f8:b3:61:05:8f:a0:2f:89:43:f3:b7:02:14:eb:
         a8:67:f8:a5:36:90:04:17:e4:2d:26:ff:15:2c:bc:d5:14:1d:
         d5:82:66:e3:6d:d8:cd:6d:09:b8:b8:c7:37:fe:f1:27:65:df:
         36:6f:89:7b:b5:83:68:af:41:43:ae:4b:44:43:88:3d:80:65:
         af:86:28:2f:d6:78:66:19:13:92:ca:23:1c:c9:c6:81:50:bb:
         0d:ed:f5:b9:da:30:9c:62:5a:70:ab:85:60:98:55:02:b9:d4:
         31:bf:42:6c:48:a6:8f:5e:cd:87:bf:77:dd:37:28:9f:8d:ef:
         d4:92:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:16 2025 by rpki-client